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EVALUATION 


This  is  the  final  report  under  contract  FI 9628-78-C-01 1 8 .  The  objective 
of  this  program  was  the  development  of  efficient  methods  for  the  automated 
testing  of  microprocessors  and  other  LSI  circuits  in  radiation  environments. 
The  program  has  resulted  in  a  test  system  capable  of  detecting  both  transient 
and  permanent  failures  caused  by  radiation  and  also  capable  of  recording  the 
errors  all  under  the  control  of  a  reference  microprocessor.  The  system 
compares  the  results  of  the  device  under  test  with  a  reference  device  and  thus 
is  adaptable  to  a  variety  of  circuits.  The  report  covers  the  period  from 
May  1978  -  June  1980  and  summarizes  the  design  of  the  test  system  which  is 
expandable  up  to  64  test  lines.  This  effort  was  part  of  the  radiation  hardened 
technology  program  under  TPO  R4D. 


WALTER  M.  SHEDD 
Project  Engineer 
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SECTION  1 
INTRODUCTION 

This  is  the  final  report  for  contract  number  F19628-78-C-0118  (contract  dates  30 
May  1978  -  30  June  1980).  The  objective  of  this  program  as  stated  in  the  contract  was  to 
"perform  an  investigation  to  identify  and  develop  efficient  methods  for  the  automated 
testing  and  characterization  of  radiation  hardened  microprocessors  and  integrated 
circuits  that  will  be  functioning  as  components  of  C  In  this  regard  Spire  has 
performed  the  following  tasks: 

1.  Set  up,  interfaced  and  debugged  a  Texas  Instruments  92K  magnetic  bubble 
memory  unit  for  use  with  a  TMS  9900/100M  microcomputer; 

2.  Set  up,  tested,  expanded  and  interfaced  as  necessary,  major  components  for 
the  development  of  radiation  testing  programs  and  procedures  of  three 
microprocessors  which  were  of  interest:  RCA  1802,  TI  9900  and  Motorola 
6800; 

3.  Developed  test  procedures  based  on  limited,  reasonable  coverage  in  a  specific 
logical  sequence  designed  to  test  microprocessors  for  failure  modes  (after 
radiation  damage)  and  identify  the  problem  areas  in  the  hardware. 

4.  Designed,  built  and  partially  debugged  a  microprocessor  test  unit  which  is 
capable  of  detecting  and  recording  both  transient  and  "permanent"  upset 
errors  in  operating  processors  during  either  pulsed  or  continuous  radiation 
exposure  (8  channels  currently,  expandable  to  64). 

5.  Designed  and  built  the  necessary  interface  hardware  and  developed  the 
necessary  software  codes  to  enable  a  test  of  the  TMS  9900  microprocessor  on 
the  above  system. 

Section  2  of  this  report  covers  the  concepts  developed  in  the  course  of  the 
contract  and  explains  how  they  contribute  to  the  overall  picture  of  the  radiation  testing 
of  microprocessors  and  other  LSI  circuits.  Section  3  summarizes  the  work  performed 
during  the  first  year  of  the  contract.  Section  4  reviews  the  past  year.  Finally,  Section  5, 
contains  recommendations  for  the  directions  of  future  work. 
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SECTION  2 
TESTING  CONCEPTS 


The  approach  taken  to  the  radiation  hardness  testing  of  microprocessors  and  LSI 
circuits  was  three  pronged  (see  Figure  1).  At  the  most  basic  level,  to  test  any  LSI  circuit 
properly,  no  matter  what  the  procedures,  a  familiarity  with  that  circuit  must  be 
developed.  This  was  most  easily  done  through  working  with  the  circuits  in  question. 
Thus,  one  aspect  of  the  contract  was  centered  around  setting  up,  interfacing,  evaluating, 
expanding  and  becoming  generally  familiar  with  the  following  components: 

RCA  COSMAC  development/evaluation  system 
RCA  CDP  1802  based  microcomputer 
Tektronix  4024  display  terminal 
RCA  floppy  disk  memory 

Texas  Instruments  TMS  9900/100M  microcomputer 
Texas  Instruments  TMS  990/302  development  system 
Motorola  6800  based  microcomputer 
Tektronix  S-3260  LSI  test  system 
Texas  Instruments  92K  bubble  memory  (BKA  0203A) 

The  second  prong  of  the  approach  was  to  develop  the  concept  for  testing 
procedures  capable  of  finding  faults  in  the  hardware  of  functioning  microprocessors 
induced  by  radiation  damage.  These  procedures  were  to  use  the  Tektronix  S-3260  system 
as  the  testing  apparatus.  The  concept  developed  was  to  examine  the  processor,  one 
functioning  area  at  a  time,  e.g.  data  bus  buffer  and  data  bus,  then  the  data  register,  then 
the  scratch  and  register,  etc.  Thus,  for  example,  in  checking  the  data  register,  one 
would  be  assured  that  any  error  was  indeed  from  that  register  and  not  from  the  bus.  In 
this  concept  one  would  basically  "walk  through"  the  processor  from  the  outside  in,  that 
is,  from  the  most  I/O  oriented  hardware  to  the  most  internal  registers  and  data  paths. 
After  identifying  this  technique  as  desirable,  a  program  flow  chart  to  partially  test  the 
RCA  CDP  1802  microprocessor  was  developed  to  demonstrate  the  concept.  The  above 
work,  except  for  that  dealing  with  the  TMS  9900/100M  and  the  TMS  990/302,  was 
performed  during  the  first  year  of  the  contract.  The  second  year  was  spent  on  the 
concepts  and  work  described  below. 


FIC.URE  1.  THREE-PRONliED  APPROACH  TO  RADIATION  TKSTINO 
OP  MICROPRO!  KSSORS 
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Since  the  S-3260  system  is  rather  large  and  immobile,  the  above  test  procedure 
only  has  utility  for  permanent  damage  detection.  That  is,  it  is  valuable  for  total  dose 
fr.  Here  tests  wherein  the  device  can  be  tested,  exposed  to  radiation  of  a  given  quantity 
and  then  tested  again.  It  is  not  useful  for  transient  error  detection  or  bit  errors  which  do 
not  involve  permanent  latchup,  etc.  Neither  is  it  suited  for  testing  for  failures  during 
pu!  >d  radiation  exposure,  since  at  present  it  has  no  hookup  to  the  LINAC  test  area.  For 
this  reason  a  third  prong  to  the  total  testing  approach  was  necessary. 

To  test  a  microprocessor  in  the  pulsed  environment  at  the  LINAC,  a  portable 
hardware  system  capable  of  detecting  and  recording  errors  had  to  be  developed.  The 
design  used  is  based  on  comparing  a  device  under  test  (DUT)  to  a  reference  device  (RD), 
pin  for  pin.  Since  the  RD  had  to  be  a  microprocessor  itself,  and  since  such  a  test  system 
would  naturally  be  run  by  some  sort  of  smart  logic,  it  was  decided  to  use  the  RD  as  the 
controlling  device  as  well.  Thus,  a  comparator  system  was  built,  one  which  could 
compare  8  pin  pairs  (expandable  up  to  64)  and  detect  logic  errors  transient  errors,  and 
parametric  failures.  However,  the  comparator  system  itself  is  not  smart.  Rather,  the 
RD  is  incorporated  into  a  microcomputer  which  controls  the  comparator  system  and 
provides  the  test  sequence  for  the  DUT  as  well.  This  concept  is  depicted  in  Figure  2. 
Included  in  this  design  is  a  good  degree  of  flexibility  in  the  comparator  system.  Thus,  for 
each  microprocessor  type  to  be  tested,  the  comparator  system  hardware  is  modified 
slightly  (mostly  cabling),  and  a  new  RD/mierocomputer  and  DUT  are  integrated  into  the 
system.  The  comparator  system,  as  described,  was  designed  and  built,  and  a  TMS  9900 
RD  and  DUT  were  chosen  for  the  first  testing.  Debugging  of  the  entire  integrated 
system  has  not  been  completed  to  this  date. 


PR[y  REFERENCE  MICROPROCESSOR  AND  SYSTEM  CONTROLLER 
'DUT=  MICROPROCESSOR  UNDER  RADIATION  TESTING 
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SECTION  3 

REVIEW  OF  FIRST  YEAR  OF  CONTRACT 


As  previously  stated,  the  first  year  of  the  contract  was  spent  in  two  endeavors. 
One  was  to  gain  familiarity  with  the  detailed  workings  of  several  microprocessors,  the 
Tektronix  S-3260  system  and  a  bubble  memory  through  a  hands-on  development  of  the 
hardware  and  software.  The  details  of  this  process  need  not  be  included  here,  since  an 
insignificant  amount  of  new  knowledge  was  produced  in  this  regard,  although  many  minor 
problems  had  to  be  overcome  in  the  area  of  component  interfacing.  This  work  is 
generally  reviewed  in  more  detail  in  AR-10059. 

The  second  major  endeavor  was  to  define  procedures  to  systematically  test  a 
microprocessor  (RCA  CDP  1802  in  particular),  and  identify  malfunctioning  regions  of  the 
processor  in  a  "comprehensive  style"  test  (i.e.,  not  exhaustive,  but  complete).  The  test 
was  supposed  to  take  a  reasonable  length  of  time  on  the  S-3260  system.  It  was  decided, 
through  literature  research  and  discussions,  that  it  was  best  to  use  methods  which  rely 
heavily  on  concepts  like  commonality  of  data  paths  and  of  functions  and  subfunctions. 
For  instance,  if  two  registers  of  an  on-chip  register  array  can  be  shown  to  be  able  to  be 
loaded  (separately,  via  a  common  internal  data  bus)  into  the  accumulator,  and  if  data 
from  one  register  can  be  shown  to  be  properly  added  to  the  contents  of  the  accumulator, 
then  the  proper  addition  of  data  from  the  second  register  into  the  accumulator  need  not 
be  explicitly  tested. 

The  subfunction  approach  recognizes  the  fact  that  execution  of  any  of  the 
instructions  of  the  microprocessor  repertoire  involves  sequential  and  parallel  usage  of 
some  subset  of  the  relatively  small  number  of  intermediate-level  functional  blocks  or 
subfunctions.  Typical  of  these  functional  blocks  are,  for  example,  address  and  data 
buffers,  the  ALU,  scratch  pad  registers,  the  instruction  register  and  decoder,  the 
accumulator  register,  etc.  Thorough  testing  of  some  register,  for  instance,  by  multiple, 
varied  usage  of  any  one  instruction,  and  then  testing  all  over  again  using  another 
instruction,  Ls  an  example  of  the  high  redundancy  of  the  "exhaustive"  approach,  which 
can  be  readily  eliminated. 

The  thorough  testing  of  a  register  array  brings  up  two  further  considerations 
concerning  simplification.  Ideally,  a  register  array  should  be  tested  with  all  possible 


1 

(i.e.  2  =  65,536)  words,  one  register  at  a  time  (thereby  ignoring  possible,  but  hopefully 

very  slight,  interregister  interactions).  One  simplifying  assumption  is  that  in  a  particular 
class  (i.e.  on-chip  scratch  pad)  of  registers,  one  is  the  same  as  any  other  as  regards 
radiation  effects  and  hardness.  Accordingly,  only  one  register  of  each  class  need  by 
thoroughly  tested.  If  different  registers  (or  sets  of  registers)  reside  at  different  places 
on  the  chip,  long  access  paths  to  some  but  not  other  registers  may  vitiate  the  assumption 
of  identical  registers. 

A  second,  more  extensive  simplification  concerns  the  ideal  65K-word  test  of  one 
or  more  of  the  registers.  Semiconductor  memory  manufacturers  are  faced  with  the  same 
problem  and  resort  to  testing  with  various  "bit  patterns".  Among  the  more  than  100  such 
patterns  developed  are  all  one/all  zeros,  checkerboard,  walking  ones,  surround/disturb, 
etc.  A  dozen  or  so  well-chosen  test  words  should  provide  fairly  complete  coverage. 
Added  to  the  above  concepts  is  the  additional  comment  that  the  most  reasonable 
approach  in  any  one  processor  would  be  to  start  with  the  functional  blocks  which  are 
closest  to  the  I/O  paths  and  to  work  "inward"  from  there. 

As  an  example  of  these  procedures,  a  partial  test  of  the  RCA  CDP  1802 
microprocessor  which  was  specifically  oriented  toward  execution  on  the  Tektronix  S-3260 
automated  LSI  test  system  was  flow  charted.  It  is  in  the  form  of  a  "dialog"  between  the 
microprocessor  and  the  LSI  tester,  typically  in  the  form: 

1.  Microprocessor  requests  next  instruction 

2.  S-3260  checks  levels  and  supplies  the  next  instruction 

3.  Microprocessor  inputs  this  "fetched"  instruction,  decodes  it  and  executes  it 

4.  S-3260  supplies  requisite  "memory  requests"  and  tests  resulting  output  levels. 

Preparation  for  generating  this  testing  procedure  involved  analysis  of  available 
technical  literature  on  the  1802  internal  architecture  —  to  establish  data  paths,  major 
registers  and  functions,  any  temporary  or  "hidden"  registers  or  "transparent  buffers",  etc. 
—  as  well  as  the  explicit  details  of  the  complete  instruction  set,  so  as  to  determine  what 
can  be  or  must  be  determined,  and  in  what  order. 

The  resulting  test  procedure  was  included  as  Appendix  I  of  the  annual  report 
AR-10050. 


-7- 


SECTION  4 

REVIEW  OF  SECOND  YEAR  Or  CONTRACT 


One  major  effort  during  the  second  year  concerned  the  conceptual  design,  detail 
design  and  fabrication  of  the  portable,  self-contained  system  capable  of  detecting  and 
recording  transient  upsets  in  microprocessors.  The  system  concept  is  to  compare  a 
device  under  test  (DUT)  to  a  reference  device  (RD)  which  is  simultaneously  controlling 
the  test  system.  As  the  system  concepts  developed,  the  block  design  of  the  system 
changed  from  that  given  in  Figure  2  to  that  shown  in  Figure  3.  The  more  detailed  design 
of  Figure  3  and  the  design  of  the  comparator  system  shown  in  Figure  4  contain  provisions 
for  the  following  characteristics:  (1)  parametric  error  detectors  are  included  which  will 
detect  transient  upsets  or  output  level  errors;  (2)  the  reference  microprocessor  is  used  as 
both  the  reference  device  and  the  controller  of  the  test  system;  (3)  the  system  records 
each  error  as  it  occurs,  resvnchronizes  the  DUT  and  RD  and  proceeds  with  further 
testing:  (4)  all  pins  of  the  DUT  are  tested;  (5)  the  test  instruction  sequence  is  contained 
in  either  ROM,  RAM  or  both,  and  is  thus  completely  flexible  and  not  limited  in  length. 

The  main  hardware  hurdle  was  the  buffering  of  the  microprocessors  in  such  a  way 
that  the  reference  microprocessor  could  serve  both  as  the  RD  and  as  the  system 
controller.  This  was  accomplished  by  having  a  bidirectional  buffer  for  the  RD  and  a 
unidirectional  buffer  for  the  DUT.  (See  Figure  3.)  The  electrical  termination  of  the  two 
devices  is,  however,  equivalent.  Also,  the  problem  of  resvnchronizing  the 
microprocessors  after  an  error  occurrence  without  having  to  reenter  a  monitor  program 
had  to  be  dealt  with.  This  was  achieved  in  a  microprocessor-independent  fashion  by  the 
combined  use  of  custom  hardware  and  a  well-defined  software  approach.  The  solutions 
to  the  above  problems  and  details  of  the  system  will  be  discussed  in  the  next  subsection 
4.1.  Subsection  4.2  deals  with  the  adaptation  of  the  test  system  to  the  intended  radiation 
testing  of  a  TMS  9900  mireroproccssor  through  software.  The  test  system  control 
software  developed  and  written  (in  assembly  language  code)  for  the  9900  was  the  second 
area  of  major  effort  during  the  last  year  of  the  contract. 
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FICURF  3.  MICROPROCESSOR  TEST  SYSTEM  BLOCK  DIAGRAM 


64  LINES 


ERROR  STATE  BUS  AND  CONTROL  LINE 


4.1  THE  MICROPROCESSOR  TEST  SYSTEM  HARDWARE 


The  hardware  which  comprises  the  microprocessor  test  system  consists  of  six 
major  elements:  comparator  system,  reference  microprocessor,  test  microprocessor, 
bidirectional  buffer,  unidirection  buffer  and  main  microcomputer  board.  Figure  5  shows 
this  hardware,  built  for  the  system  under  this  contract.  Let  us  group  these  units  into 
three  functional  groups.  The  first  group,  the  RD,  the  bidirectional  buffer  (BB)  and  the 
main  board  (MM),  make  up  a  functioning  microcomputer.  Peripherals,  support  boards, 
additional  memory,  etc.,  can  be  added  to  the  MM  as  desired  in  the  usual  fashion.  The 
buffer  is  transparent  to  both  the  RD  and  the  MM.  This  complete  micro* a..;-  •  ter  A  the 
controlling  device  for  the  system.  The  memory  ROM  and  RAM  conta  ;  the  monitor 
and  monitor  support  codes,  (2)  the  program  codes  for  running  the  test  system  ana  (3)  the 
actual  codes  designed  to  exercise  the  DUT  microprocessor.  The  cables  connecting  these 
components  -ire  a!!  64  lines,  so  that  any  microcomputer  on  the  market  today  can  be 
handled.  To  convert  the  buffer  from  use  with  one  microprocessor  to  us*'  with  another,  a 
few  control  lines  on  the  Bit  must  be  reconfigured.  These  lines  control  the  breakup  of  the 
total  64  lines  into  input,  output,  power  and  I/O  line  groups,  which  of  course  change  from 
processor  to  processor.  The  present  BB  is  configured  for  a  TMS  9900,  since  this  was  the 
major  processor  of  interest  for  testing.  The  circuit  diagram  for  the  bidirectional  buffer 
(Buffer  Board  A'  and  cables  are  included  in  Appendix  I. 

The  unidirectional  puffer  (UB)  and  the  DUT  make  up  the  second  function  group  of 
the  system.  The  IT*  is  transparent  for  the  DUT  receiving  input  from  the  YU  and  also 
terminates  tnr  ! > L  !  output.  Because  the  UB  is  one-way,  however,  the  .MM  never 
receives  any  signal ••  from  the  DUT.  From  the  standpoint  of  the  MM,  the  UB  locks  lit-.*  a 
constant  Ion  Thus,  the  DUT  receives  instructions,  memory  fetches,  etc.,  from  the  MM 
in  synchronization  with  the  RD,  but  its  outputs  are  ignored  by  the  test  system  (except  in 
the  comparator).  1  he  UB  is  included  m  Appendix  1  as  Buffer  Board  B. 

The  third  functional  group  of  the  total  system  is  comprised  of  the  comparator 
system  circuits.  The  olock  diagram  was  shown  in  Figure  4.  As  the  DUT  and  the  KD  are 
functioning  ir.  parallel,  the  comparator  system  is  comparing  their  outputs,  pin  for  pin. 
The  present  system  is  built  up  for  8  lines  only,  but  the  design  includes  expansion  to  64 
lines.  For  a  DUT  response  to  be  considered  correct,  it  must  pass  two  tests.  First,  it 
must  be  logically  equal  to  the  RD  response.  Thus,  each  line  in  the  DUT  is  logically 


FIGURE  5.  TEST  SYSTEM  HARDWARE:  Power  Supply,  Card  Cage 
With  Baekpanel  Wiring,  Cables,  Processor  Test 
Box,  and  Comparator,  Buffer  and  Control  Boards 


compared  to  the  identical  line  in  the  RD.  If  the  two  are  not  in  the  same  logic  state  for 
the  entire  time  for  which  the  data  is  supposed  to  be  valid,  a  logic  error  is  flagged  for 
that  line.  The  second  test  that  must  be  passed  is  a  parametric  test.  The  logic  level  must 
be  within  certain  voltage  specifications  for  the  entire  data  valid  period  for  that  iine  to 
pass  its  parametric  error  test.  If  not,  a  level  error  is  declared  for  that  line. 

The  possible  combinations  of  level  and  logic  errors  which  can  be  detected  are  as 
follows: 

A.  Svstem  will  detect  +4  ns  slew  on  normal  logic  pulse;  e.g.,  if  logi'  .agh  or  low) 
is  not  present  within  4  ns  of  edges  of  strobe,  system  declares  a  level  error. 


B.  System  will  declare  a  level  error  if  a  "glitch"  of  200  mV  with  10  ns  basewicth 
is  present. 


1:101!  I.OOIC  LEVEL 


200  mV 


10  ns  p 


(THIS  200  mV  COli.!'  HI!  AS 
1. ITT  Mi  As— 20  '  V.  1 1'  !> 

—  "  DIFFICULT  TO  S\  V  T  .  1L 
PRO PKli  NOISE  lst-1  A  l'iON 
IS  WORKED  Ol"i.) 


C.  Svstem  declares  level  error  and  logic  error  if  "glitch"  reaches  the  opposite 

Irvgie  st  -it  e. 


liK.li  LOOIC  LEV  FI. 


i - 


LOU  LOOIC  LEVEL  (OF  7480) 


D.  System  will  declare  a  level  error  for  a  logic  signal  deviating  from  the  valid 
regions  by  >20  mV  for  a  large  fraction  of  the  strobe  width. 

E.  System  will  declare  a  logic  error  if  logic  level  is  valid  for  the  entire  strobe 
width  but  is  in  disagreement  with  the  "standard"  logic  state. 


TEST  PIN  SIGNAL 


BUT  "STANDARD"  PIN  SAYS 
SHOULD  BE  LOGIC  0. 


Once  either  a  logic  or  a  level  error  is  flagged  by  the  error  detectors,  that  error 
condition  and  the  error  conditions  of  all  the  other  lines  being  tested  is  latched,  and  a 
signal  is  sent  to  the  control  logic.  The  control  logic  then  sends  an  interrupt  to  the 
microcomputer  signalling  that  an  error  has  occurred.  At  this  point,  all  further  signals  to 
the  comparator  system  are  ignored,  except  control  signals  coming  from  the 
microcomputer. 

The  response  of  the  computer  is  a  set  of  sequential  signals  which  turns  on  the 
tri-state  buffers  one  at  a  time,  along  with  the  output  buffer,  so  that  the  latched 
condition  at  the  time  of  the  error  is  placed  on  the  I/O  bus  (for  the  acceptance  by  the 
computer)  in  one  byte  segments.  Then  the  computer  resynehronir.es  the  processors  (to  be 
discussed),  resets  the  comparator  system  and  continues  testing  as  desired.  The  entire 
circuits  for  the  error  detectors,  latches  and  buffers  for  eight  lines  and  the  control 
functions  are  included  in  Appendix  I  as  the  comparator  and  control  boards.  The 
expansion  to  more  pins  is  simply  a  matter  of  copying  the  detector/lateh/'buffer  circuits 
as  necessary  and  tying  into  the  control  logic  (which  is  onlv  a  few  lines). 

Synchronization  of  the  microprocessors  at  the  initial  powerup  and  after  error 
detection  proved  to  be  a  major  difficulty.  First  of  all.  the  TMS  9904  four-phase  clock 
was  not  capable  of  driving  two  9900  processors.  Therefore,  one  990-1  was  used  to  drive 
two  additional  9904  clocks,  one  for  each  processor.  This  is  shown  in  Figure  6.  This  is  all 
right,  except  at  powerup.  After  powerup,  the  relative  phases  of  the  two 
processor-driving  99ii4's  is  arbitrary.  1  he  two  clocks  must  lie  brought  into 
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FIGURE  6.  SOLUTION  TO  SEPARATE,  SYNCHRONIZED  CLOCK  DRIVERS 
FOR  THE  RD  AND  THE  DUT 


synchronization.  This  problem  was  solved  by  having  a  gate  between  the  primary  clocks 
and  the  secondary  clocks.  Figure  7  shows  the  block  diagram.  The  one-shots  are  adjusted 
so  that  every  time  the  momentary  closure  is  pushed,  one  clock  pulse  is  removed  from  the 
OSC  IN  line  going  to  one  of  the  secondary  clocks.  This  shifts  the  relative  phase  by  90°. 
The  synchronization  is  monitored  by  an  LED,  which  turns  off  when  the  clocks  are  in 
phase.  The  circuit  for  the  powerup  synchronization  is  included  in  Appendix  I,  on  the 
buffer  boards. 

The  second  part  of  the  synchronization  problem  arises  when  the  DUT  makes  an 
error.  After  this  occurs,  the  DUT  is  in  an  unknown  state.  In  order  to  resynchronize  the 
processors,  a  reset  must  be  used,  since  on  most  processors  a  reset  signal  is  the  only  one 
which  is  always  responded  to  on  the  next  phase-one  clock  pulse,  no  matter  what  the 
processor  status.  However,  upon  reset,  one  does  not  want  to  go  back  to  a  monitor;  one 
wants  to  continue  testing.  The  solution  was  to  have  the  processor  initiate  its  own  reset 
and  simultaneously  set  a  hardware  flag  on  the  control  board.  It  then  of  course  responds 
to  its  reset,  but  before  it  goes  to  the  monitor,  it  checks  the  flag.  If  this  flag  is  set,  it 
does  not  go  to  the  monitor,  but  rather,  continues  testing  from  the  point  of  interrupt.  The 
circuitry  for  this  part  of  the  control  system  is  also  included  in  Appendix  I,  on  the  control 
board. 

More  discussion  on  the  details  of  the  subunits  is  included  in  various  quarterly 
reports. 

4.2  SOFTWARE  FOR  THE  TESTING  OF  THE  TMS  9900 

The  software  for  the  error  detection,  syctcm  control,  error  storage  and  test 
sequencing  for  ttie  TMS  9900  was  written  during  the  latter  part  of  the  year,  using  the 
990/302  development  system.  The  code  consists  of  four  modules  (SETUP,  SYNC, 
ESCAPE.  ERROR),  the  message  list  for  I/O  and  an  addition  to  the  resident  monitor 
called  PSMON.  1'he  purposes  of  the  modules  are  as  follows: 

SETUP  -  Does  all  of  the  initialization  of  the  program:  sets  up  workspaces,  ent>.  - 
branch  instructions  into  the  interrupt  vector  locations,  sets  aside  a  stack 
in  RAM  for  storage  of  the  error  conditions  of  the  DUT  and  handles  the 
proper  entry  or  reentry  into  the  test  code.  (The  test  code  is  that  code, 
yet  to  be  written,  which  will  be  the  actual  sequence  of  instructions  that 
the  DU  E  is  being  tester  with  during  exposure.) 


SYNC  -  Triggers  the  synchronization  reset  and  setting  of  the  self-reset  flag. 

Upon  return  from  the  reset  the  program  returns  to  the  test  code  at  the 
point  of  the  error  interrupt. 

ESCAPE  -Allows  the  escape  from  test  code  during  execution:  Hitting  the  ESC 
key  causes  a  return  to  the  monitor. 

ERROR  -  Receives  the  interrupt  when  a  DUT  error  occurs.  It  turns  off  the 
comparator  system,  stores  the  error  condition  one  byte  at  a  time  on  the 
error  stack,  tests  for  overrunning  the  allowed  stack  space, 
resynchronizes  the  processors  through  use  of  the  SYNC  module  and 
returns. 

The  PSMON  addition  to  the  resident  monitor  precedes  the  first  instructions  normally 
executed  by  the  monitor.  This  segment  of  code  tests  the  flag  which  is  set  whor.  the 
software  issued  reset  is  used.  If  the  flag  is  set,  the  execution  is  transferred  to  the  SYNC 
reentry  point.  If  the  flag  is  not  set,  execution  is  continued  at  the  top  of  the  ususu 
monitor.  This  code  addition  is  to  be  resident  in  the  monitor  EPROM  (low  addresses). 

The  memory  map  of  ttie  microcomputer  for  radiation  testing  is  shown  in  figure  8. 
The  assembly  language  codes  for  the  above  modules  ore  included  as  Appendix  11. 


SECTION  5 

RECOMMENDATIONS  FOR  FUTURE  WORK 


5.1  STATUS  AT  THE  CONCLUSION  OF  THE  CURRENT  CONTRACT 

The  status  of  the  test  system  hardware  and  software  at  the  conclusion  of  the 
contract  is  as  follows: 

Hardware  -  All  circuits  for  the  testing  of  eight  lines  of  a  processor  have  been 
built.  The  adaptation  of  the  buffer  boards  for  the  TMS  9900  has 
been  completed,  including  the  clock  driver  circuits.  Cables  for  the 
9900  board  connectors  have  been  fabricated.  Board  modifications  of 
the  990/100M  computer  to  accommodate  the  I/O,  control  and 
inclusion  of  the  PSMON  have  been  made.  The  monitor  has  been 
moved  from  2708  EPROM's  to  2716  EPROM's  to  allow  for  EPROM 
expansion  with  the  relevant  codes.  The  hardware  Is  only  partially 
debugged. 

Software  -  All  modules  mentioned  have  been  written  and  debugged.  Further 
testing  must  await  the  comp'ctc  debugging  of  the  hardware  because 
certain  functions  can  only  be  tested  with  real  I/O  or  with  hardware 
emulation.  The  actual  test  code  has  not  been  written,  and  EPROM's 
have  not  been  burned. 

Summarizing,  to  bring  the  total  system  on  line  for  testing  eight  lines  of  a  TMS 
9900  (four  data  lines,  bidirectional:  four  address  lines,  output),  the  hardware  must  be 
debugged  as  a  system,  the  software  must  be  tested  with  the  real  hardware  and  the  codes 
must  be  burned  into  EPROM. 

5.2  FUTURE  EFFORTS 

Once  the  system  is  cheeked  nut,  the  next  major  task  would  be  the  writing  of  the 
test  code  for  the  actual  racial  ion  testing,  this  could  be  approached  from  two  possible 
directions.  One  would  be  to  follow  the  concept'  devised  in  this  contract  of  "walking 
through"  the  processor  from  the  out  side,  lo  do  tins,  one  would  have  to  become  more 
familiar  with  the  99UD  and  !e  throne*;  a  careful  studv  of  the  intern]  architect  wo. 

Alternative!',,  one  could  first  '  u  e  «>  igw  i-.odcst  n;;pr<  aeh  of  defining  -mail  execution 


n 


loops  using  only  a  few  instructions  at  a  time  and  testing  these  loop;  individually.  This 
technique  has  been  successfully  adopted  by  Tom  Ellis  of  the  Naval  Weapons  Support 
Center  (IEEE  Trans.  NS-26,  4735  (1979)).  Either  way,  with  the  completion  of  the  system 
developed  under  this  contract,  the  combination  of  being  able  to  do  parametric  testing  as 
well  as  logic  testing  during  pulsed  radiation  expsoure  should  be  a  valuable  and  unique 
capability. 

Further  efforts  should  include  work  on  the  expansion  of  the  system  to  at  least  32 
lines  and  intensive  testing  on  the  system  susceptibility  to  interference  aom  the  LINAC. 
Additionally,  one  would  want  to  be  working  on  the  software  and  har  ••  .miC  cations 
necessary  to  test  other  processors  as  .veil  as  the  minor  modifications  •  ,nc  J“L  version 
of  the  9900  , SHE  9900)  and,  of  course,  to  actually  go  ahead  with  radiation  testing. 


APPENDIX  I 

CIRCUIT  DIAGRAMS  FOR  THE 
MICROPROCESSOR  TEST  SYSTEM 
(Including  adaptation  for  the  TMS  9900) 
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APPENDIX  II 

ASSEMBLY  LANGUAGE  CODES  FOR  THE 
990/100M  CONTROL  OF  THE  TEST  SYSTEM 


IE  4  0 

0  0  0  0 

► 

IE  50 

E  0  0  0 

AORG 

>  Z  i }  0  0 

C3  0 

Z  0  0  0 

* 

\2  r ) 

Z  0  0  0 

i.i  300  3ETP 

LI  MI 

o 

E  002 

0  0  0  0 

ill*  30 

E004 

OEEO 

LUPI 

STOP 

Z  003 

FF4.3 

\2  ?  0 

Z003 

HP  03 

LI 

R5.CYNC 

Z  0  0.3 

El  00 

1 3  0  0 

Z  003 

OE  03 

Li 

P3  <  C'.'UP 

E  0  OE 

TT  I'  S> 

i  j  i  ;i 

E  0 1  0 

02  07 

LI 

R7j VEST 

E  0 1 E 

PEE  4 

■;E  0 

E  0 1  4 

*■»  -»  * 

NOV 

n  i  7  +" 

’  -•  ’• 0 

E  0 1  3 

C5S5 

MOV 

R5 . *P7 

:  4  o 

E  0  L  E 

OE  01 

LI 

P 1  .  riP  A 

E  :■  1  A 

043  0 

2-  :<  0 

e  :>  i  •: 

0202 

LI 

PE. ESC 

E  0 1  E 

EEO  0 

JTO 

E  OE  0 

02  0  ?• 

LI 

R  3 . EPP 

—  • 

T  E-  «=■ 

' —  i— 

r  o 

E  OE  4 

C  1 E  0 

MOV 

■»'  I NT5  >  R' 

3  .jZ'3 

0  0 1  3 

j;  :■  0 

Z  023 

CD  01 

MOV 

R  1  .  ♦-R4+- 

2;  0  i.i 

EOEA 

C  5  0  3 

MOV 

R  3.  *-R4 

4  :.i  i.i 

Z  02  I 

C 1 E  0 

MOV 

■J  I  NT  4.  R- 

z  ozz 

0  0 1  E 

4  1  0 

E  0  3  0 

CD  01 

MOV 

P 1  j  *r’4  *• 

4  SO 

Z  !  J  ?•  Z 

C50E 

MOV 

Pc:  *  *?4 

4  J:  il 

E  0  3  4 

0  343 

DECT 

R3 

4  4  i 

Z  0  33 

0343 

DECT 

P3 

<<<<  SETUP  SEGMENT  >>» 

TURN  DPP  ALL  INTERRUPTS 

SETUP  THE  yaRK SPACE 

SYNC  ENTRY  POINT 

ADDRESS  OF  SYNC  yOPKSPftCE 

SYNC  VECTOR  0.,IP.PC> 

SYNC  WORKSPACE  INTO  SYNC  VECTOR 
SYNC  ENTRY  POINT  INTO  SYNC  VECTOR 
MACHINE  CODE  FOR  EJ> 

ESCAPE  ENTRY  POINT 

ERROR  ENTRY  POINT 

INTERRUPT  5  VECTOR  PC  INTO  R4 

B-?>  INTO  FIRST  INSTRUCTION  WORD 
ERR  ENTRY  INTO  SECOND  .'JOED 
INTERRUPT  4  VECTOR  PC  INTO  R4 

FIRST  INSTRUCTION  MOPD 
ESC  ENTRY  INTO  SECOND  UORD 

RG  NON  NAS  PROPER  OVERRUN  ADDRESS 
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04  50 

E  033 

PR  A0 

TOP 

OUT 

■j'CRLF 

E  USA 

£  330 

04  SO 

E03C 

3  F  A  0 
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SFR 

E03E 
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04  TO 

E04  0 

SEC  0 

ECHO 

RO 

0430 

E  043 

PFA0 
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•?CRLF 

E  044 
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0430 
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0330 

CI 

R  0  *  F 

E  043 

4300 

05  00 

3  044 

13  04 
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FRES 
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E04C 
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CI 
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E  04E 

53  00 

05E  0 
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JE3 
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E  053 
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0540 
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LI 
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LI 
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R 1  *  34  . 
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E  033 
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05?  0 

E  034 

0311 
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PI  -  1 

03  0  0 
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SLA 
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0303 

LI 
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0340 
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REST 
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E  07C 
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CI 
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E  033 
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JME 
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E  034 

0430 

B 
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E033 

EA00 
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E  033 

03E  0 

P3U 

LWP I 

e:mp 
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FF3C 

073  0 

E  03C 

0  3  30 

RTWP 

073  0 

E03E 

*• 

OUTPUT  INITIAL  QUERRY 
SET  RESPONSE  MIT  14  ECHO 


IS  ANSWER  AN  F? 

YES.  THEH  JUMP  TO  FRES 
IS  ANSWER. AN  R? 

YES.  THEH  JUMP  TO  PEST 
IF  .NEITHER*  THEN  MISTAKE.  TRY  AGAI 
ERROR  WORKSPACE  POINTER  INTO  R3 

OVERRUN  ADDRESS  INTO  RO  OF  ERR 
NUMBER  OF  STORE  BYTES  PEP  ERROR 

PUT  INTO  RE  OF  ERR 

ROUND  UP  BYTES  TO  WORDS 
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RAPC  pla.nl>  and  executes  research,  development,  test  and 
selected  acquisition  programs  in  support  of,  Command,  ConlAol 
Communications  and  Intelligence  (C3 I)  activities.  Technical 
and  engineering  Support  within  aliens  of  technical  competence 
Is  provided  to  ESP  Program  Offices  ( POs )  and  other  ESP 
elements.  The  principal  technical  mission  areas  are 
communications ,  electromagnetic  guidance  and  control,  Sur¬ 
veillance  of  ground  and  aerospace  objects,  Intelligence  data 
collection  and  handling,  Information  system  technology. 
Ionospheric  propagation,  solid  state  sciences,  microwave 
physics  and  electronic  reliability,  maintainability  and 
compatibility . 
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